Cryptocurrency security researcher al_f4lc0n has accused blockchain project Injective of slow communication in handling a critical security vulnerability and disputed the bounty amount. The vulnerability stemmed from a defect in the sub-account verification mechanism, threatening over $500 million in assets. al_f4lc0n failed to receive the deserved bounty, raising questions about Injective's security governance.
White hat hacker f4lc0n discovered a critical vulnerability in the Injective protocol that could have led to $500 million in assets being extracted. Although after the fix, the hacker only received a $50,000 bounty, which is below the maximum standard of $500,000. f4lc0n has disputed this and plans to continue exposing the matter.